Datenschutzerklärung
Privacy Policy
This policy explains what personal data we collect when you shop with us, why we collect it, who we share it with, how long we keep it and what your rights are. We handle personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Introduction and Who We Are
Miranda Apparel is the data controller for the personal data collected through this website. That means we decide why and how your personal data is processed. "Miranda Apparel" is the trading name under which this shop operates; our business contact details are set out below and in section 14 of this policy.
We keep things deliberately simple: we do not operate customer accounts, we do not run a newsletter, and we have no subscription or loyalty programme. We collect only the personal data we need to fulfil your order, answer your questions and meet our legal obligations. We do not sell personal data, and we do not share it with anyone for their own marketing purposes.
Business Details
Brand Name: Miranda Apparel
Business Address: 15 Sennitt Way, Stretham, ELY CB6 3JF, United Kingdom
E-Mail: support@miranda-apparel.com
Support Mon to Fri, 8am to 3pm GMT/BST (UK time)
2. What Personal Data We Collect
| Category | What it includes | Why we collect it |
|---|---|---|
| Identity and contact details | Your name, email address | To confirm your order and to reply when you write to us |
| Delivery details | Delivery address, billing address | To send your parcel and to match the payment to the order |
| Order details | What you bought, sizes, colours, the amount paid, order dates | To fulfil the order, to handle returns and refunds, and to keep the records the law requires us to keep |
| Payment details | Confirmation that a payment succeeded, the payment method used, the last digits of a card | To reconcile orders and to issue refunds to the correct payment method |
| Technical data | IP address, browser and device type, pages viewed, the site you arrived from | To keep the shop working securely and to detect fraud or abuse |
| Communications data | The content of your emails to us and our replies | To answer you and to keep a record of what was agreed |
We never collect or store your full card number. Card details go directly from the checkout to our payment service provider over an encrypted connection and are never visible to us at any point.
3. How We Collect It
We collect personal data in three ways:
- Directly from you, when you place an order at the checkout or send us an email.
- Automatically, through the essential cookies and security features built into our shop platform when you browse the site (for example, your IP address and the cookies that keep your cart working).
- From our providers, when our payment service provider confirms that a payment has succeeded, or when our delivery carrier confirms a delivery.
You can browse the site without telling us who you are. We cannot fulfil an order without a name, an email address and a delivery address.
4. Lawful Bases for Processing
Under the UK GDPR, we must have a lawful basis for everything we do with your personal data. The bases we rely on are:
- Performance of a contract - processing your order, taking payment, delivering your goods and handling returns and refunds is necessary to perform our contract with you.
- Legal obligation - we are required by law to keep certain order and accounting records, in particular for tax purposes.
- Legitimate interests - we have a legitimate interest in keeping the shop secure, preventing fraudulent orders and payment misuse, and answering your enquiries properly. We always balance this against your rights, and we never use legitimate interests as a basis for marketing.
- Consent - where we rely on your consent for anything, we will ask for it clearly at the time, and you can withdraw it at any moment.
5. How We Use Your Data
- To take, pack, ship and track your order.
- To send order confirmations, dispatch notices and delivery updates - these are service messages about your order, not marketing.
- To answer your questions and to handle returns, refunds and claims about faulty goods.
- To detect and prevent fraudulent orders and payment misuse.
- To meet our tax, accounting and consumer law record-keeping obligations.
- To keep the shop secure and working properly.
We do not operate a newsletter and we do not add customers to any marketing list, because no such list exists. The only emails you will receive from us are about an order you have placed or a question you have asked.
We do not sell your personal data, and we do not disclose it to anyone for their own marketing purposes.
We do not carry out automated decision-making or profiling that produces legal or similarly significant effects for you. Orders are reviewed and fulfilled by people.
6. Cookies and Tracking
This shop sets only the cookies that are strictly necessary for it to function. These are set by Shopify, the platform the shop runs on, and they:
- keep the contents of your cart in place while you browse and check out;
- maintain your checkout session securely;
- help protect the shop against fraud and abuse.
We do not use any analytics, advertising or marketing cookies, and we do not use tracking pixels or any form of cross-site tracking. We do not build a profile of your browsing behaviour and we do not share your browsing data with advertisers.
Because these cookies are essential to running the shop, they do not require consent under UK law. You can block or delete them through your browser settings, but if you do, the cart and checkout will stop working. That is a technical limitation of how online shops work, not a choice we have made.
7. Who We Share Your Data With
Only with the providers who make an order possible, and only with what each of them needs to do their part:
| Recipient | What they receive | Why |
|---|---|---|
| Shopify | Order data and technical data | They run and host this shop and store its data |
| Our payment service provider (Shopify Payments) | Payment and billing data | To process your payment securely and to issue refunds |
| Our delivery carrier | Your name, delivery address and a contact detail | To deliver your parcel and to contact you about the delivery |
We may also disclose personal data where we are required or authorised to do so by law, for example in response to a court order, or where it is necessary to prevent or detect crime, such as fraudulent orders.
We never share your data with third parties for marketing, and we never sell it.
8. International Data Transfers
Our shop platform, Shopify, operates on servers located outside the United Kingdom, which can include the United States and Canada. This means that some of your personal data may be stored or processed outside the UK by Shopify on our behalf.
Where personal data is transferred outside the UK, we rely on appropriate safeguards recognised under UK data protection law to protect it, in particular the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses. These require the recipient to protect your data to a standard essentially equivalent to the UK GDPR. You may ask us for further details of the safeguards in place by emailing support@miranda-apparel.com.
9. Data Retention
- Order and transaction records: we keep these for as long as a return, refund or warranty claim could arise from the order, and for at least six years afterwards, because HM Revenue & Customs requires us to keep accounting records for that period.
- Correspondence: we keep your emails and our replies for as long as they are relevant to an open matter, and then as part of our records as evidence of what was agreed.
- Technical data: we keep this only for as long as is necessary to keep the shop secure and to investigate incidents.
When we no longer need personal data, and we are not required by law to keep it, we delete it or remove the details that identify you.
10. Data Security
This site runs over an encrypted (HTTPS) connection. Access to order data on our side is limited to the people who need it to fulfil orders and answer your questions. Payment card data is handled by our payment service provider under their own security controls - payment processing is carried out to PCI DSS standards - and is not stored by us.
No system is completely secure and we do not claim otherwise. If a personal data breach occurs that is likely to result in a risk to your rights and freedoms, we will notify the Information Commissioner's Office, and we will notify you as well where the law requires it.
11. Your Rights
Under the UK GDPR and the Data Protection Act 2018, you have the following rights in relation to your personal data:
- The right of access - to receive a copy of the personal data we hold about you.
- The right to rectification - to have inaccurate or incomplete data corrected.
- The right to erasure - to ask us to delete your personal data where there is no good reason for us to keep it.
- The right to restrict processing - to ask us to pause what we do with your data in certain situations.
- The right to data portability - to receive your data in a structured, commonly used, machine-readable format, or to have it transmitted to another organisation.
- The right to object - to object to processing that is based on our legitimate interests.
- The right to withdraw consent - where we rely on your consent for anything, you can withdraw it at any time without affecting what we did before.
To exercise any of these rights, email support@miranda-apparel.com. We do not charge for requests, and we will respond within one month (we may extend this by a further two months for complex requests, in which case we will tell you). We may need to verify who you are before we release anything - that protects you, not us. If we cannot comply with a request, we will tell you why.
If you are unhappy with how we have handled your personal data, please contact us first so we can put it right. You also have the right to complain at any time to the Information Commissioner's Office (ICO), the UK regulator for data protection, at ico.org.uk.
12. Children's Privacy
This shop is intended for adults. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, contact us at support@miranda-apparel.com and we will delete it.
13. Changes to This Policy
We may update this policy as the shop changes or as the law changes. The current version is always the one published on this page, and the date below tells you when it last changed. Where a change materially affects how we use your data, we will make that clear on the page.
14. Contact
Any privacy question, subject access request or complaint can be sent to support@miranda-apparel.com. Our support team is available Monday to Friday, 8am to 3pm GMT/BST (UK time).
Related Policies
Contact Information
Brand Name: Miranda Apparel
Business Address: 15 Sennitt Way, Stretham, ELY CB6 3JF, United Kingdom
E-Mail: support@miranda-apparel.com
Support Mon to Fri, 8am to 3pm GMT/BST (UK time)
Last updated 27 July 2026.